Privacy Policy

SPHEREMEDIA.AI LTD, Reg. No. HE 495384, Aiolou & Panagioti Diomidou 9, Katholiki, 3020 Limassol, Cyprus is the data controller for bullai.ai. Lead supervisory authority: Office of the Commissioner for Personal Data Protection, Cyprus. Contact: support@bullai.ai.

We collect account and contact data, including name, email, phone, country and language; verification status for email and SMS; usage and device data, including pages, features, IP and device; subscription and payment metadata, while full card data stays with our payment processor; marketing data, including consents, messages sent and engagement; and community content you post.

Operating the Service and your subscription is based on contract. Our own marketing by email, SMS or push is based on consent and can be withdrawn at any time. Sharing your contact details with a specific named broker is based on explicit consent per broker and can be withdrawn at any time. Community moderation, security, fraud prevention and product analytics are based on legitimate interests. Tax, accounting and legal duties are based on legal obligation.

We transfer your name, email and phone number to a partner broker only after you tick a consent box naming that broker. From transfer, the broker is an independent data controller under its own privacy policy; our contracts prohibit it from reselling or sharing your data onward. We are compensated for these referrals - see the Affiliate & Broker Partnership Disclosure.

We use hosting, analytics, email/SMS and payment providers as processors under GDPR Art. 28 agreements. Transfers outside the EU/EEA rely on adequacy decisions or the 2021 Standard Contractual Clauses.

Account data is retained for the life of the account plus 24 months. Consent and lead-transfer logs are retained for 5 years after withdrawal as compliance evidence. Payment records are retained as required by Cyprus tax law. Community posts are retained until deleted by you or removed in moderation.

EU/EEA users under GDPR and UK users under UK GDPR have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to their supervisory authority. Direct-marketing objections are always honoured. Cyprus users may contact dataprotection.gov.cy and UK users may contact the ICO. Users elsewhere may exercise applicable local rights by contacting support@bullai.ai.

The Service is for users aged 18 and over. We do not knowingly process data of minors and delete it on discovery.

We use strictly necessary cookies for login, security and consent storage, which are always on; analytics cookies, only with consent; and marketing or affiliate cookies, including those that attribute your broker signups to our referrals, only with consent. Non-essential cookies load only after you accept them in the banner under EU ePrivacy and UK PECR rules. You can change your choices at any time in your browser settings. For the current table of cookies, providers and durations, contact support@bullai.ai.